Privacy Policy

For the personal data we process about you as our customer or website visitor, ALISH SOLUTIONS LIMITED is the data controller. Where you use the Service to process personal data about your own customers and contacts, you are generally the controller of that data and we act as your processor, handling it on your instructions under these terms and any applicable data-processing terms.

• Account data: name, email address, login credentials and account settings.
• Business data: the business profile, brand information, offers and inputs you provide to generate content and campaigns.
• Usage data: how you interact with the Service, including log data, device and browser information, and diagnostic information.
• Conversation and call data: chat messages, voice- call recordings and transcripts, and summaries generated by AI agents, together with related lead information.
• Billing data: subscription and payment information, processed by our payment providers.

We rely on the following lawful bases under UK GDPR: performance of a contract (to provide the Service you subscribe to); legitimate interests (to operate, secure and improve the Service, where not overridden by your rights); consent (for certain communications, cookies and, where applicable, call recording); and legal obligation (to meet regulatory and tax requirements).

• To provide, maintain and improve the Service.
• To generate content, campaign drafts, and AI chat and voice conversations at your request.
• To process subscriptions, payments and renewals.
• To provide support and respond to enquiries.
• To secure the Service and prevent misuse or fraud.
• To comply with legal and regulatory obligations.

We use trusted third parties to operate the Service. These may include AI providers such as Anthropic and OpenAI (to generate content and power conversations), Supabase (data hosting and storage), Stripe and Whop (billing), Vapi (voice and telephony) and Resend (transactional email). These providers process data on our behalf under contractual terms and only as needed to provide their services. A current list of sub-processors is available on request.

We keep personal data only for as long as necessary for the purposes described in this policy, including to provide the Service, comply with legal obligations, resolve disputes and enforce agreements. Retention periods vary by data type; for example, account data is generally kept for the life of the account, while conversation and call data may be retained for a shorter period unless you need it kept for your records.

AI agents may record and transcribe chat and voice conversations to provide summaries, qualify leads and maintain records. Where calls are recorded, a recording notice is provided, and AI agents identify themselves as AI. As the business using these features, you are responsible for ensuring an appropriate lawful basis and any required consents or notices are in place for the individuals you converse with, in line with our AI Calling & Messaging Policy.

Some of our providers may process data outside the UK. Where personal data is transferred internationally, we take steps to ensure an appropriate level of protection, such as relying on adequacy regulations or standard contractual clauses (including the UK International Data Transfer Addendum) where required.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse, including access controls and encryption in transit. No system is completely secure, and we cannot guarantee absolute security, but we work to protect your data and to respond promptly to any incident.

Subject to conditions and exemptions under UK GDPR, you have the right to access, rectify, erase or restrict processing of your personal data, to object to certain processing, to data portability, and to withdraw consent where we rely on it. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO). To exercise your rights, contact us using the details below.

Our websites use cookies and similar technologies for essential functionality, preferences and analytics. You can control non-essential cookies through your browser settings or any cookie controls we provide. Some features may not work correctly if certain cookies are disabled.

The Service is intended for businesses and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

For privacy questions or to exercise your rights, contact us at support@alishsol.com.